Hackers Backdoor Linux Servers via Trojanized CWP Web Server
CWPdoor Linux malware spreads through a trojanized Control Web Panel web server to backdoor Linux servers.
Tag
#Authentication Bypass
18 results in the archive.
OpenSSH Issues Emergency Patch for Critical Alpine Linux SSH Password Flaw
OpenSSH released an urgent fix for a critical authentication bypass vulnerability affecting Alpine Linux servers using long SSH passwords.
Critical CVSS 10.0 Flaw in LXD and MicroCloud Allows Trusted Client Impersonation
A critical CVSS 10.0 vulnerability in Canonical's LXD and MicroCloud enables attackers to impersonate trusted clients using only the public certificate and access clusters and virtual machines via the HTTPS API.
UAT-11473 APT Exploits Cisco SD-WAN to Deploy KeyDrift Malware
Talos identified UAT-11473 exploiting an authentication bypass in Cisco SD-WAN Catalyst Controllers to deploy KeyDrift malware, posing a significant threat to enterprise SD-WAN environments.
HPE patches eight critical RCE and auth bypass flaws in ArubaOS
Hewlett Packard Enterprise released fixes for 72 vulnerabilities in ArubaOS, including eight critical remote code execution and authentication bypass flaws.
Cisco Warns of Critical Authentication Bypass in SD-WAN Manager
Cisco disclosed a critical zero-day authentication bypass vulnerability in its Catalyst SD-WAN Manager allowing unauthenticated remote attackers to gain admin access via the API.
EvilTokens PhaaS Disrupted After Compromising 12,000 Microsoft Accounts
The EvilTokens phishing platform compromising over 12,000 Microsoft accounts across 10,000 organizations was disrupted through an operation led by Microsoft's Digital Crimes Unit, halting ongoing account takeovers.
Critical Authentication Flaw in Mitsubishi Electric GX Works3 and Motion Control
A high-severity authentication vulnerability in Mitsubishi Electric GX Works3 and its Motion Control Settings allows local attackers to bypass password checks and manipulate control programs.
Critical Artifactory Flaws Exploited to Deploy Rust Backdoor Malware
Attackers exploit chained critical vulnerabilities in JFrog Artifactory to bypass authentication, gain admin access, and deploy Rust-based backdoors on self-hosted servers.
Cisco confirms active exploitation of critical FMC authentication bypass flaw
Cisco has confirmed active exploitation of a critical authentication bypass vulnerability (CVE-2026-20079) in its Secure Firewall Management Center software, risking enterprise defenses.
Critical Citrix NetScaler Auth Bypass Flaw Exploited in Attacks
Attackers are actively exploiting a critical authentication bypass vulnerability in Citrix NetScaler, significantly impacting enterprise security.
Critical JFrog Artifactory Flaw Exploited Days After Patch
Attackers are actively exploiting CVE-2026-82329, a critical authentication bypass in JFrog Artifactory, shortly after its public disclosure and patch release.
Critical NetScaler Flaw Can Bypass Authentication on Gateway Servers
Citrix has patched critical authentication bypass vulnerabilities affecting NetScaler ADC and Gateway, impacting specific FIPS and NDcPP builds used on gateway and AAA servers.
CISA Adds Critical N-able N-central Vulnerability to KEV Catalog
CISA added CVE-2026-18577, an authentication bypass vulnerability in N-able N-central, to its Known Exploited Vulnerabilities Catalog due to active exploitation, prioritizing federal agency remediation under BOD 26-04.
JetBrains warns of critical TeamCity remote code execution flaw
JetBrains disclosed a critical authentication bypass vulnerability in TeamCity On-Premises that enables remote code execution, posing significant risk to enterprise environments.
Three Critical VMware Flaws Enable Auth Bypass and VM Escape
Broadcom published updates for critical VMware vulnerabilities in ESX, vCenter, Workstation, and Fusion enabling authentication bypass and VM escape with high severity.
Certighost Exploit Allows Low-Privileged AD Users to Impersonate Domain Controllers
The Certighost exploit enables low-privileged Active Directory users to obtain Domain Controller certificates and authenticate as domain controllers, risking critical Kerberos credential compromise.
Critical Authentication Bypass in Tycon Systems TPDIN-Monitor-WEB2
A critical authentication bypass vulnerability in Tycon Systems TPDIN-Monitor-WEB2 allows unauthenticated attackers full administrative control, risking critical infrastructure disruptions.